Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: yLge3R492TkknophTOWtQvQ2pOjwArk9xSbnF4cVLLo=
Subject key identifier: 16:8E:C3:72:98:E1:0A:CD:BD:F3:D5:BF:23:AF:17:33:F8:1D:5F:0D
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 01A1DD5E44053AD0AC782675A7954EF4248F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0A46
Signing time: Sun 15 Nov 2026 04:01:44 +0000
Manifest this update: Sun 15 Nov 2026 04:01:44 +0000
Manifest next update: Mon 16 Nov 2026 04:01:44 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: zaV+uvWU4Exkpo9/G5wlvLdtVOvDdSXnu1XmM3tOKWk=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:44:05:3a:d0:ac:78:26:75:a7:95:4e:f4:24:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Nov 15 04:01:44 2026 GMT
Not After : Nov 16 04:01:44 2026 GMT
Subject: CN=168ec37298e10acdbdf3d5bf23af1733f81d5f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:56:4a:e9:46:8d:95:1d:ab:39:a1:65:5f:59:
e0:f8:b2:3c:13:0c:da:da:66:4b:68:a4:4c:f8:37:
ca:93:06:f7:cf:5c:bc:c3:bf:39:dd:6e:6a:7e:8d:
22:78:b0:cf:c8:cd:a4:f4:e3:c3:dd:35:b4:fe:93:
c7:67:3c:22:6d:26:6e:88:47:d5:7f:c2:44:05:93:
d7:45:0a:c4:86:90:bd:65:63:90:98:6f:90:bb:da:
06:ef:91:7d:9e:0a:16:89:fd:a6:58:b6:6e:ea:16:
22:93:fe:63:c4:50:85:ea:7a:dc:4d:99:3e:4c:b9:
62:2d:98:90:a9:0f:2b:0c:57:e5:26:02:ad:0e:3f:
72:15:ae:eb:36:2e:b4:a2:92:b7:ea:8a:85:2f:86:
ca:4c:c4:3a:01:db:cd:5f:63:cb:6d:17:13:bd:cb:
e5:3c:e7:64:b3:b9:2a:17:9d:f8:7f:c7:57:cf:c6:
5a:34:f1:ed:a6:d0:47:46:bf:9b:4b:6c:d4:8b:9b:
27:eb:92:19:1a:fe:c9:51:87:09:81:ec:dc:3b:c1:
2c:ec:aa:c0:90:0f:db:d1:a2:26:28:3e:ec:d9:78:
bb:de:a9:1c:01:1a:06:cb:12:65:be:6d:1d:59:9f:
32:e1:2e:76:84:55:d8:82:2e:e3:1c:be:4f:4d:5b:
98:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8E:C3:72:98:E1:0A:CD:BD:F3:D5:BF:23:AF:17:33:F8:1D:5F:0D
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:33:79:00:5f:e4:79:65:ca:a5:be:c4:76:60:3c:55:13:54:
c4:49:fe:53:6f:a4:07:2f:a3:3a:12:73:1c:95:07:d0:f9:2c:
02:d1:83:a9:cd:d3:3a:52:7d:43:dc:09:f7:7b:01:fa:8d:00:
71:e7:ab:ad:b9:1d:d4:78:55:4f:8c:60:0e:b6:37:98:04:98:
f3:8e:e5:b8:da:48:13:00:46:9c:da:1b:6c:a6:d0:14:88:ce:
44:b1:89:cb:e9:02:31:fc:b8:cf:74:78:c3:f5:e5:8e:48:48:
50:f7:da:7b:e6:4c:d8:a7:22:15:9b:8d:70:f9:78:36:17:29:
a3:4d:f8:78:a5:ad:27:fd:35:e2:67:0a:7d:04:ab:62:35:88:
39:8d:e8:9e:2c:2a:d1:4e:26:ac:01:cf:82:47:3e:65:d6:44:
54:9d:c1:bb:a4:37:85:f2:6a:d7:08:9e:58:fa:89:b7:d6:d8:
3a:cf:1e:82:c3:9c:23:73:42:26:7a:59:dc:be:86:80:40:cd:
75:ca:9b:9d:41:66:08:21:c1:a6:cf:fa:68:ba:77:5b:3c:48:
a9:4b:a4:0e:69:6a:44:71:f2:35:32:a3:9d:d7:50:59:c6:dc:
98:71:b1:3a:33:e9:56:b4:7f:11:20:f2:d5:54:33:b9:77:39:
81:09:cb:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdXkQFOtCseCZ1p5VO9CSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmEzMDU2ZTYyNTkyNDlmNDY2ZjAwNTViYjExYjgzYTZh
MzBhNDIwHhcNMjYxMTE1MDQwMTQ0WhcNMjYxMTE2MDQwMTQ0WjAzMTEwLwYDVQQD
EygxNjhlYzM3Mjk4ZTEwYWNkYmRmM2Q1YmYyM2FmMTczM2Y4MWQ1ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VZK6UaNlR2rOaFlX1ng+LI8Ewza
2mZLaKRM+DfKkwb3z1y8w7853W5qfo0ieLDPyM2k9OPD3TW0/pPHZzwibSZuiEfV
f8JEBZPXRQrEhpC9ZWOQmG+Qu9oG75F9ngoWif2mWLZu6hYik/5jxFCF6nrcTZk+
TLliLZiQqQ8rDFflJgKtDj9yFa7rNi60opK36oqFL4bKTMQ6AdvNX2PLbRcTvcvl
POdks7kqF534f8dXz8ZaNPHtptBHRr+bS2zUi5sn65IZGv7JUYcJgezcO8Es7KrA
kA/b0aImKD7s2Xi73qkcARoGyxJlvm0dWZ8y4S52hFXYgi7jHL5PTVuY2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaOw3KY4QrNvfPVvyOvFzP4HV8NMB8GA1UdIwQY
MBaAFEwqMFbmJZJJ9GbwBVuxG4OmowpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTIt
Mjg0MTAxM2JjY2I0LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTItMjg0MTAxM2JjY2I0
LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzN5AF/k
eWXKpb7EdmA8VRNUxEn+U2+kBy+jOhJzHJUH0PksAtGDqc3TOlJ9Q9wJ93sB+o0A
ceerrbkd1HhVT4xgDrY3mASY847luNpIEwBGnNobbKbQFIjORLGJy+kCMfy4z3R4
w/XljkhIUPfae+ZM2KciFZuNcPl4Nhcpo034eKWtJ/014mcKfQSrYjWIOY3oniwq
0U4mrAHPgkc+ZdZEVJ3Bu6Q3hfJq1wieWPqJt9bYOs8egsOcI3NCJnpZ3L6GgEDN
dcqbnUFmCCHBps/6aLp3WzxIqUukDmlqRHHyNTKjnddQWcbcmHGxOjPpVrR/ESDy
1VQzuXc5gQnLcg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:40 2026 by rpki-client